
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215907.roa
File: AS215907.roa (raw, json)
Hash identifier: t+96LvGg0vNuXCuMybSKFDF+r1dLNLJTTJ3tdZG5Ssw=
Subject key identifier: A7:EC:91:FF:FD:F1:92:6D:55:AE:D1:6D:F0:57:96:16:70:E6:E9:E0
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 0ED671D4DC33474A4C8F5FD379E4422556D1346B
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215907.roa
Signing time: Fri 05 Jun 2026 07:12:45 +0000
ROA not before: Fri 05 Jun 2026 07:07:45 +0000
ROA not after: Fri 04 Jun 2027 07:12:45 +0000
asID: 215907
IP address blocks: 2a06:9f81:2900::/40 maxlen: 48
2a06:9f81:3200::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d6:71:d4:dc:33:47:4a:4c:8f:5f:d3:79:e4:42:25:56:d1:34:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:45 2026 GMT
Not After : Jun 4 07:12:45 2027 GMT
Subject: CN=A7EC91FFFDF1926D55AED16DF057961670E6E9E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:59:b8:ca:dc:d8:61:28:b6:f7:96:6e:ba:
02:da:8d:8d:5a:24:f3:2c:c7:0d:ab:1c:bd:f7:eb:
c8:93:d1:0b:59:69:f8:53:0e:6f:50:7d:5e:2b:6c:
cf:3f:56:92:ce:26:46:98:80:72:da:d4:c8:1a:2e:
27:1b:d4:81:a8:15:a7:89:9b:a5:7a:f4:2c:ff:26:
ec:1c:06:40:43:61:58:15:6a:0e:43:5a:a4:9c:f1:
fb:f8:9c:87:5a:89:37:8b:f6:e2:9f:d6:c8:41:4b:
f7:d4:0c:ae:96:a3:8a:78:6d:66:38:9c:f4:1e:53:
76:98:36:b2:e7:24:7d:12:1c:74:74:1f:79:19:ed:
83:92:ab:da:bf:6e:62:b6:18:56:67:a6:4d:f4:3b:
a2:2f:f7:f2:39:16:b8:1f:20:89:1f:33:84:13:c8:
3b:21:6f:c2:06:62:54:87:46:56:1b:2d:74:26:db:
a1:08:ea:6c:b0:61:43:25:eb:16:5d:c6:d0:64:66:
2a:f2:75:79:1a:90:6c:f8:8a:39:c8:24:04:77:92:
da:e5:61:1b:1f:9c:35:7e:b4:be:88:e9:0d:8c:aa:
3d:22:2f:88:25:f4:99:44:ba:5a:18:20:25:e1:87:
22:17:d3:64:d2:1a:26:a7:e5:53:d1:c9:ff:f4:d6:
d0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EC:91:FF:FD:F1:92:6D:55:AE:D1:6D:F0:57:96:16:70:E6:E9:E0
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215907.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:2900::/40
2a06:9f81:3200::/40
Signature Algorithm: sha256WithRSAEncryption
6a:f6:4f:d3:bb:8b:15:b0:d2:c8:2a:8d:95:35:fe:1d:a8:c7:
cd:a9:2e:c3:8e:a0:ee:a5:4b:3c:3d:6b:e7:76:ff:f7:93:a7:
1e:12:52:0f:c9:05:9a:18:b7:71:70:8d:31:ad:20:ab:30:3c:
23:a2:28:43:9e:00:7a:c1:ad:fa:43:bb:52:4d:3e:30:79:62:
42:80:f9:4b:c8:ad:b9:55:bd:d7:66:e0:56:f9:07:bf:94:ec:
4b:e7:74:9a:d8:20:f5:e2:d3:8c:af:16:86:34:ad:1f:e7:84:
b0:70:2c:84:e5:4b:65:88:8a:d1:a2:84:08:35:a8:4e:ef:0f:
6e:09:1e:df:36:97:17:05:54:9e:b1:50:33:75:27:75:a3:9a:
63:68:74:b5:cf:90:2e:16:a0:5d:d9:30:05:c8:3f:58:8a:b6:
ed:1f:44:9a:5d:d4:52:d0:c3:d8:45:7a:f9:00:55:30:3c:0d:
bf:5b:33:e3:af:b7:f2:c5:d7:87:db:e7:e6:a7:10:20:35:a0:
ab:97:0a:18:a5:ef:32:e4:a2:cb:f5:f7:00:97:0d:be:9d:91:
53:5a:10:ab:30:b9:d3:3d:bc:7d:51:77:0f:fc:be:3e:39:9c:
5b:cf:89:38:c5:b5:5d:c2:45:09:e3:fa:f4:f5:f0:d2:13:61:
ef:8e:56:56
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIUDtZx1NwzR0pMj1/TeeRCJVbRNGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDVaFw0yNzA2MDQwNzEyNDVaMDMxMTAvBgNV
BAMTKEE3RUM5MUZGRkRGMTkyNkQ1NUFFRDE2REYwNTc5NjE2NzBFNkU5RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfVm4ytzYYSi295ZuugLajY1a
JPMsxw2rHL3368iT0QtZafhTDm9QfV4rbM8/VpLOJkaYgHLa1MgaLicb1IGoFaeJ
m6V69Cz/JuwcBkBDYVgVag5DWqSc8fv4nIdaiTeL9uKf1shBS/fUDK6Wo4p4bWY4
nPQeU3aYNrLnJH0SHHR0H3kZ7YOSq9q/bmK2GFZnpk30O6Iv9/I5FrgfIIkfM4QT
yDshb8IGYlSHRlYbLXQm26EI6mywYUMl6xZdxtBkZirydXkakGz4ijnIJAR3ktrl
YRsfnDV+tL6I6Q2Mqj0iL4gl9JlEuloYICXhhyIX02TSGian5VPRyf/01tAjAgMB
AAGjggH8MIIB+DAdBgNVHQ4EFgQUp+yR//3xkm1VrtFt8FeWFnDm6eAwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjE1OTA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF
BwEHAQH/BBowGDAWBAIAAjAQAwYAKgafgSkDBgAqBp+BMjANBgkqhkiG9w0BAQsF
AAOCAQEAavZP07uLFbDSyCqNlTX+HajHzakuw46g7qVLPD1r53b/95OnHhJSD8kF
mhi3cXCNMa0gqzA8I6IoQ54AesGt+kO7Uk0+MHliQoD5S8ituVW912bgVvkHv5Ts
S+d0mtgg9eLTjK8WhjStH+eEsHAshOVLZYiK0aKECDWoTu8Pbgke3zaXFwVUnrFQ
M3UndaOaY2h0tc+QLhagXdkwBcg/WIq27R9Eml3UUtDD2EV6+QBVMDwNv1sz46+3
8sXXh9vn5qcQIDWgq5cKGKXvMuSiy/X3AJcNvp2RU1oQqzC50z28fVF3D/y+Pjmc
W8+JOMW1XcJFCeP69PXw0hNh745WVg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:13 2026 by rpki-client